Description
In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.
References
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.